App: Context signature verification security measure Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
App: Context 0.01-0.968
Description:
--------------------------------------------------------------------------------
Bugtraq id: 59832
CVE (CAN) ID: CVE-2012-6141
 
App: Context is the application framework of Web applications, command line programs, and server programs.
 
In App: Context 0.01-0.968, The Storable: thaw function is not correctly used, which allows remote attackers to send a request to the App: Session: Cookie or App: Session :: HTMLHidden passes specially crafted requests and uses this vulnerability to execute arbitrary code.
 
<* Source: vendor

Link: http://xforce.iss.net/xforce/xfdb/84198
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
App: Context
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://search.cpan.org /~ Spadkins/App-Context-0.968/lib/App/Context. pm

This article permanently updates the link address: